Update docs/topics/class-based-views/generic-display.txt

simple typo in "Making friendly template contexts"
Added a new required ALLOWED_HOSTS setting for HTTP host header validation.

This is a security fix; disclosure and advisory coming shortly.
Restrict the XML deserializer to prevent network and entity-expansion DoS attacks.

This is a security fix. Disclosure and advisory coming shortly.
Checked object permissions on admin history view.

This is a security fix. Disclosure and advisory coming shortly.

Patch by Russell Keith-Magee.
Added a default limit to the maximum number of forms in a formset.

This is a security fix. Disclosure and advisory coming shortly.
Update 1.5 release notes for XML and formset fixes.
Merge pull request #737 from hrbonz/docs_CBV_generic_views_typo

Fixed typo in docs/topics/class-based-views/generic-display.txt
Fixes typo introduced by django/django@08dc90bccf7c4ffa8b04064d74b54c1150af5ff9. This is described in Trac ticket:19855.
Fixed #19728 - Updated API stability doc to reflect current meaning of "stable".
Merge pull request #739 from JustinTArthur/ticket-19855

Fixed typo in legacy database how to
This function is unused and should have been removed a few releases ago.
Add test for collapsible fieldset functionality in admin
Fixed #14571 -- Updated embedded jQuery from 1.4.2 to 1.9.1

Thanks dArignac for the initial patch.
Replaced the obsolete toggle event handling JS function

The toggle(func1, func2) event handling function has been removed
in jQuery 1.9.
Fixed #19598 -- Fixed jQuery tagName retrieving

Thanks rj at rudiculous.net for the report.
Added a db_constraint option to ForeignKeys.

This controls whether or not a database level cosntraint is created. This is useful in a few specialized circumstances, but in general should not be used!
Refactored negated IS NULL handling

This one cleaned up add_filter() negated filter generation. As a side
effect split_exclude() was cleaned up, too.

Refs #19849
Removed join() promote kwarg

The join promote=True was over-aggressive in select_related handling.
After that was removed, the only other user was query.combine(). That
use case is very easy to handle locally, so there is no more need for
the join(promote=True) flag.

Refs #19849.
Cleaned up join promotion in query.combine() with OR

Refs #19849
Added a test for negated Q object querying

The added test is from the patch in ticket #19672 (written by Ian
Kelly). Fixed #19672, refs #19849.